It is all about ease of use and security.
As handling user accounts is already not the beginner task, I would see reasonable not to grant any rights by default, as Pascal proposed.
Jan
On 3 November 2011 05:43, Pascal Heus pascal.heus@gmail.com wrote:
Christian:
Running 7.0.1 under Amazon Linux. I use the "basex" script to create a
new user. If I then call basexclient or use a pHp client with the new
credentials, I get an access denied. It works fine after I restart the
service. Note that server is launched as a service using "basexhttp
-S". Could this make any difference?
best
*P
On 11/2/11 4:37 PM, Christian Grün wrote:
Hi Pascal,
Just started to configure various user accounts. Does the server need a restart in order for new accounts to be recognized?
new user accounts are instantly activated.
Also, I would recommend the default privileges to be none or read at best. New accounts should not be able to write to the DB by default.
That could be changed pretty easily; what do others think? Christian
It is all about ease of use and security. As handling user accounts is already not the beginner task, I would see reasonable not to grant any rights by default, as Pascal proposed.
..fine; from now on, new users won't have any permissions granted. I've updated our code base and uploaded new snapshots. Christian
basex-talk@mailman.uni-konstanz.de
-
Christian Grün -
Jan Vlčinský (CAD)